Use dedicated users to run services

This commit is contained in:
2018-11-10 11:34:16 +01:00
parent 516d4899b4
commit 7d7f4ccfc2
7 changed files with 49 additions and 23 deletions

View File

@ -1,3 +1,5 @@
SSH_PUBLIC_KEY := $(shell cat ~/.ssh/id_rsa.pub)
build:
docker build \
--build-arg "HTTP_PROXY=$(HTTP_PROXY)" \
@ -9,8 +11,8 @@ build:
run:
docker run -it --rm \
-p 2222:22 \
-p 8080:80 \
-p 2222:2222 \
-p 8080:8080 \
-v "$(PWD)/data/repo:/fdroid/repo" \
-v "$(PWD)/data/metadata:/fdroid/metadata" \
-v "$(PWD)/data/keystore:/fdroid/keystore" \
@ -20,6 +22,7 @@ run:
-e "FDROID_KEYSTORE_PASS=mykeystorepass" \
-e "FDROID_KEYSTORE_KEYPASS=mykeystorekeypass" \
-e "FDROID_KEYSTORE_KEY_ALIAS=fdroidkey" \
-e "SSH_PUBLIC_KEY=$(SSH_PUBLIC_KEY)" \
-e "FDROID_KEYSTORE_DNAME=CN=cadoles.com, OU=ID, O=Cadoles, L=Dijon, S=France, C=FR" \
fdroid-repository:latest \
$(DOCKER_CMD)